Admins stuck between a hack and a zero-day Vista News Discuss Admins stuck between a hack and a zero-day in the Windows Vista forums; Admins stuck between a hack and a zero-day Posted by Arneh on Thursday, Sep 20, 2007, 2:10 pm - The world of IT security is in chaos, with CSOs ...

[Snuffy]

Admins stuck between a hack and a zero-day
Posted by Arneh on Thursday, Sep 20, 2007, 2:10 pm -

The world of IT security is in chaos, with CSOs seemingly on the front lines of a full scale global cyberwar being fought out by government hackers, botnet-controlling criminal gangs and compromised Web sites. Can we ever hope to keep networks safe in such an environment?

Accusations of government-sponsored hacking have been flying in recent weeks with the US, UK, Germany, and most recently, New Zealand, claiming to have been attacked by hackers that allegedly work for the Chinese government -- charges denied by the country itself.

Meanwhile, Storm worm has also been in the news with security researchers debating whether the botnet controlled by the worm, which is estimated to contain between one and five million infected PCs, could be used by criminals as a massive distributed supercomputer, potentially packing the power to deliver massive spamming campaigns, knock out targets with a DDoS attack and even use a SETI@home-style operation to crack very strong encryption, very quickly.

Sorry link here: http://www.zdnet.com.au/blogs/securi...0.htm?feed=rss

[Vistanoob]

What a nightmare!

[Snuffy]

It gets worse.... New PDF Zero-Day Vulnerability

Security researcher Petko Petkov has revealed a new zero-day flaw effecting Adobe's popular PDF format. 21-Sep-2007

Source: PC World

[Snuffy]

Hacker finds PDF bug as serious as Firefox flaw
Today, September 21, 2007, 27 minutes ago
The hacker who discovered a recently patched QuickTime flaw affecting the Firefox browser says he has found an equally serious flaw in Adobe Systems Inc.'s PDF file format.

"Adobe Acrobat/Reader PDF documents can be used to compromise your Windows box. Completely!!! Invisibly and unwillingly!!!," wrote Petko Petkov, in a breathless Thursday blog posting. "All it takes is to open a PDF document or stumble across a page which embeds one."

Petkov said he had confirmed the issue on Adobe Reader 8.1 on Windows XP and that other versions may be affected.

The security researcher said he would not release code that shows how this attack works until Adobe provided a patch for the problem, but he has already sent other software developers scrambling for bug fixes over the past week.

[JoshW02@hotmail.co.uk]

So what an international CyberWar is going on, and all I heard about was China!!!

[Vistanoob]

What next??? I'm going to look into the Foxit reader, maybe that's more secure.
Thanks for the update,from a Firefox and Acrobat user,( so many sites use PDFs.)

[JoshW02@hotmail.co.uk]

You keep tellin us whats out Snuffy but whats in (not hit) lol, I even heard Estonia (name of country hope I got right spelling sorry if didn't) got attacked!